DevGroup-ru /
dotplant2
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace app\backend\components; |
||
| 4 | |||
| 5 | use Closure; |
||
| 6 | use kartik\icons\Icon; |
||
| 7 | use Yii; |
||
| 8 | use yii\grid\Column; |
||
| 9 | use yii\helpers\ArrayHelper; |
||
| 10 | use yii\helpers\Html; |
||
| 11 | use yii\helpers\Url; |
||
| 12 | use app\backend\components\Helper; |
||
| 13 | |||
| 14 | class ActionColumn extends Column |
||
| 15 | { |
||
| 16 | public $buttons; |
||
| 17 | |||
| 18 | private $defaultButtons = []; |
||
| 19 | |||
| 20 | private $callbackButtons; |
||
| 21 | |||
| 22 | /** |
||
| 23 | * @var string the ID of the controller that should handle the actions specified here. |
||
| 24 | * If not set, it will use the currently active controller. This property is mainly used by |
||
| 25 | * [[urlCreator]] to create URLs for different actions. The value of this property will be prefixed |
||
| 26 | * to each action name to form the route of the action. |
||
| 27 | */ |
||
| 28 | public $controller; |
||
| 29 | /** |
||
| 30 | * @var callable a callback that creates a button URL using the specified model information. |
||
| 31 | * The signature of the callback should be the same as that of [[createUrl()]]. |
||
| 32 | * If this property is not set, button URLs will be created using [[createUrl()]]. |
||
| 33 | */ |
||
| 34 | public $urlCreator; |
||
| 35 | |||
| 36 | public $url_append = ''; |
||
| 37 | |||
| 38 | public $appendReturnUrl = true; |
||
| 39 | |||
| 40 | public function init() |
||
| 41 | { |
||
| 42 | parent::init(); |
||
| 43 | |||
| 44 | $this->defaultButtons = [ |
||
| 45 | [ |
||
| 46 | 'url' => 'edit', |
||
| 47 | 'icon' => 'pencil', |
||
| 48 | 'class' => 'btn-primary', |
||
| 49 | 'label' => Yii::t('app', 'Edit'), |
||
| 50 | ], |
||
| 51 | [ |
||
| 52 | 'url' => 'delete', |
||
| 53 | 'icon' => 'trash-o', |
||
| 54 | 'class' => 'btn-danger', |
||
| 55 | 'label' => Yii::t('app', 'Delete'), |
||
| 56 | 'options' => [ |
||
| 57 | 'data-action' => 'delete', |
||
| 58 | ], |
||
| 59 | ] |
||
| 60 | ]; |
||
| 61 | |||
| 62 | |||
| 63 | if (null === $this->buttons) { |
||
| 64 | $this->buttons = $this->defaultButtons; |
||
| 65 | } elseif ($this->buttons instanceof Closure) { |
||
| 66 | $this->callbackButtons = $this->buttons; |
||
| 67 | } |
||
| 68 | } |
||
| 69 | |||
| 70 | /** |
||
| 71 | * Creates a URL for the given action and model. |
||
| 72 | * This method is called for each button and each row. |
||
| 73 | * @param string $action the button name (or action ID) |
||
| 74 | * @param \yii\db\ActiveRecord $model the data model |
||
| 75 | * @param mixed $key the key associated with the data model |
||
| 76 | * @param integer $index the current row index |
||
| 77 | * @param bool $appendReturnUrl custom return url for each button |
||
|
0 ignored issues
–
show
|
|||
| 78 | * @param string $url_append custom append url for each button |
||
|
0 ignored issues
–
show
Should the type for parameter
$url_append not be string|null?
This check looks for It makes a suggestion as to what type it considers more descriptive. Most often this is a case of a parameter that can be null in addition to its declared types. Loading history...
|
|||
| 79 | * @param string $keyParam custom param if $key is string |
||
| 80 | * @param array $attrs list of model attributes used in route params |
||
| 81 | * @return string the created URL |
||
| 82 | */ |
||
| 83 | public function createUrl( |
||
| 84 | $action, |
||
| 85 | $model, |
||
| 86 | $key, |
||
| 87 | $index, |
||
| 88 | $appendReturnUrl = null, |
||
| 89 | $url_append = null, |
||
| 90 | $keyParam = 'id', |
||
| 91 | $attrs = [] |
||
| 92 | ) { |
||
| 93 | if ($this->urlCreator instanceof Closure) { |
||
| 94 | return call_user_func($this->urlCreator, $action, $model, $key, $index); |
||
| 95 | } else { |
||
| 96 | $params = []; |
||
| 97 | if (is_array($key)) { |
||
| 98 | $params = $key; |
||
| 99 | } else { |
||
| 100 | if (is_null($keyParam) === false) { |
||
| 101 | $params = [$keyParam => (string)$key]; |
||
| 102 | } |
||
| 103 | } |
||
| 104 | $params[0] = $this->controller ? $this->controller . '/' . $action : $action; |
||
| 105 | foreach ($attrs as $attrName) { |
||
| 106 | if ($attrName === 'model') { |
||
| 107 | $params['model'] = $model; |
||
| 108 | } elseif ($attrName === 'mainCategory.category_group_id' && $model->getMainCategory()) { |
||
| 109 | $params['category_group_id'] = $model->getMainCategory()->category_group_id; |
||
| 110 | } else { |
||
| 111 | $params[$attrName] = $model->getAttribute($attrName); |
||
| 112 | } |
||
| 113 | } |
||
| 114 | if (is_null($appendReturnUrl) === true) { |
||
| 115 | $appendReturnUrl = $this->appendReturnUrl; |
||
| 116 | } |
||
| 117 | if (is_null($url_append) === true) { |
||
| 118 | $url_append = $this->url_append; |
||
| 119 | } |
||
| 120 | if ($appendReturnUrl) { |
||
| 121 | $params['returnUrl'] = Helper::getReturnUrl(); |
||
| 122 | } |
||
| 123 | return Url::toRoute($params) . $url_append; |
||
| 124 | } |
||
| 125 | } |
||
| 126 | |||
| 127 | |||
| 128 | protected function renderDataCellContent($model, $key, $index) |
||
| 129 | { |
||
| 130 | if ($this->callbackButtons instanceof Closure) { |
||
| 131 | $btns = call_user_func($this->callbackButtons, $model, $key, $index, $this); |
||
| 132 | if (null === $btns) { |
||
| 133 | $this->buttons = $this->defaultButtons; |
||
| 134 | } else { |
||
| 135 | $this->buttons = $btns; |
||
| 136 | } |
||
| 137 | } |
||
| 138 | $min_width = count($this->buttons) * 34; //34 is button-width |
||
| 139 | $data = Html::beginTag('div', ['class' => 'btn-group', 'style' => 'min-width: ' . $min_width . 'px']); |
||
| 140 | foreach ($this->buttons as $button) { |
||
| 141 | $appendReturnUrl = ArrayHelper::getValue($button, 'appendReturnUrl', $this->appendReturnUrl); |
||
| 142 | $url_append = ArrayHelper::getValue($button, 'url_append', $this->url_append); |
||
| 143 | $keyParam = ArrayHelper::getValue($button, 'keyParam', 'id'); |
||
| 144 | $attrs = ArrayHelper::getValue($button, 'attrs', []); |
||
| 145 | Html::addCssClass($button, 'btn'); |
||
| 146 | Html::addCssClass($button, 'btn-sm'); |
||
| 147 | $buttonText = isset($button['text']) ? ' ' . $button['text'] : ''; |
||
| 148 | $data .= Html::a( |
||
| 149 | Icon::show($button['icon']) . $buttonText, |
||
| 150 | $url = $this->createUrl( |
||
| 151 | $button['url'], |
||
| 152 | $model, |
||
| 153 | $key, |
||
| 154 | $index, |
||
| 155 | $appendReturnUrl, |
||
| 156 | $url_append, |
||
| 157 | $keyParam, |
||
| 158 | $attrs |
||
| 159 | ), |
||
| 160 | ArrayHelper::merge( |
||
| 161 | isset($button['options']) ? $button['options'] : [], |
||
| 162 | [ |
||
| 163 | 'class' => $button['class'], |
||
| 164 | 'title' => $button['label'], |
||
| 165 | ] |
||
| 166 | ) |
||
| 167 | ) . ' '; |
||
| 168 | } |
||
| 169 | $data .= '</div>'; |
||
| 170 | return $data; |
||
| 171 | } |
||
| 172 | } |
||
| 173 |
This check looks for
@paramannotations where the type inferred by our type inference engine differs from the declared type.It makes a suggestion as to what type it considers more descriptive.
Most often this is a case of a parameter that can be null in addition to its declared types.